KR20030062548A - Apparatus for information security and cryptography using optical switch - Google Patents

Abstract

PURPOSE: An information security device and an encryption device by using an optical switch are provided to build the security system with a very high safety by constructing an encryption and security devices by using a simple and low cost liquid crystal optical switch. CONSTITUTION: An information security device by using an optical switch includes an interface driving circuit(10), a memory(11) for storing a reference code, a data(8), an interface block(9), an amplifying circuit(12), a calculation circuit(13) and an output circuit(14). In the information security device, the interface block(9) includes an optical switch, a light source and a light receiving device. The optical switch is capable of passing or blocking the optical signal from the light source and the light receiving device converts the optical signal passing through the optical switch into an electrical signal. And, the interface driving circuit(10) opens or closes the optical switch in response to the reference code stored at the memory(11).

Description

Apparatus for information security and cryptography using optical switch}

The present invention relates to an information security and encryption apparatus using an optical switch, and more particularly, to an information security and encryption apparatus for performing authentication, encryption / decryption of information using an optical switch.

In the information society, information eavesdropping, information forgery, and fraud are very important issues for banks, businesses, and consumers, and the importance of security has become more important with the recent increase in the use of electronic payment, identity verification, and electronic commerce.

In addition, recently, various advertisements are delivered by direct mail through the sale of Internet addresses, but advertisements that adversely affect children are also flooded, and a system for filtering the delivered information is required.

On the other hand, vehicle radios such as mobile phones or TRS are widely used in recent years, but electromagnetic wave shielding measures for preventing malfunctions due to numerous radio waves are almost incomplete, and it is very dangerous to rely on security for radio waves.

Recently, in order to correct self-authentication, electronic payment, etc., and to prevent eavesdropping, common cryptography and secret key cryptography / decryption techniques have been reviewed. As the coercive force and the strength of identity authentication can be improved, problems such as complexity of algorithms and processing speed are lowered. Therefore, a method for speeding up processing speed is required.

Currently, measures to prevent unauthorized access such as hacking in the network are desperately needed, but at present, they are merely coding individuals, and since they rely solely on security functions for software, they are always exposed to the risk of information hacking. In addition, in recent years, the system and security algorithm are complicated to prevent information exposure and theft in electronic payment, personal authentication, etc. As a result, authentication processing speed is slowed and development cost for this is increased.

An example of a conventional information security system is shown in FIG. Conventionally, when the data signal 1 representing the target information is input through the interface (I / F) 2, it is stored in the register 3. The stored data are operatively queried with reference codes stored in the memory 6 using the software 5 in the microprocess 4. The important point here is that since the electrical signals 1 and 0 representing data are processed by software, it is not possible to electrically isolate the entire component circuit, which makes it possible to intercept data if it can be connected electrically or electromagnetically from the outside. Is the point.

In order to solve this problem, a low-cost and compact security device is constructed in hardware, and the optical transmission speed that is not affected by radio waves can be used to increase information processing speed without being affected by external noise or environmental fluctuations. Reliable security devices are required.

The present invention has been made in view of this point, and by constructing an encryption and security device using a simple and low-cost liquid crystal optical switch to build a very high security system, network, general home, important facility access management, vehicle, It is intended to be applied to home appliances.

Another object of the present invention is to provide a highly secure system in which information cannot be obtained by remote operation by hardware device of an existing security system that relies on software such as password authentication.

1 is a schematic block diagram showing the structure of a conventional security authentication system.

2 is a schematic block diagram showing the structure of a security authentication system according to a first embodiment of the present invention.

3 is a block diagram illustrating details of an I / F portion of FIG. 2.

4A and 4B are timing charts for explaining a function of querying a target ID code in the security authentication system according to the first embodiment.

5A and 5B are schematic block diagrams showing the structure of an encryption and decryption system according to a second embodiment of the present invention.

6 is a block diagram showing the structure of an I / F according to a third embodiment of the present invention.

7 is a block diagram of a security authentication system using the I / F 31 of FIG.

8A and 8B are timing charts for explaining the function of querying the target ID code in the improved security authentication system of the present invention.

9 and 10 are examples in which the present invention is applied to building a firewall on a network.

** Description of symbols for the main parts of the drawing **

1, 8, 18, 30: data signal 9, 19, 25: I / F of the present invention

10, 20, 26, 32: I / F drive circuit 11, 21, 27, 33: memory

12, 22, 28, 34: amplification circuit 13, 35: counting circuit

14, 37: output circuit 15, 38: light source

16 optical switch 17, 40 light receiving element

23: encryption circuit 24: decryption circuit

39: liquid crystal light switch 41: polarizer (polarizing plate)

42: liquid crystal panel 43: analyzer (polarizing plate)

36 AND circuit 44: air line

45 gate circuit 46 server

In order to accomplish the above object, the present invention constructs a transmission and reception security device by using light transmission, and includes a light source unit, a light receiving unit, an optical switch, and an information processing device. According to the security apparatus using the optical switch of the present invention, the optical switch is opened and closed only by a specific cipher at the time of data transmission, and the optical switch at the time of reception is also opened and closed when it matches the specific cipher at the time of transmission, thereby making secure information communication.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

First Embodiment

2 shows a configuration of a security authentication device implemented without arithmetic processing using software, and FIG. 3 shows an internal configuration of the I / F 9 of FIG.

The security authentication device according to the first embodiment of the present invention includes an interface (I / F) portion 9 of a signal conversion including three portions of an optical switch 16, a light source 15, and a light receiving element 17; I / F driving circuit 10, memory 11 storing reference codes, waveform amplifying circuit 12 for converting the received optical output signal into a square wave signal that can be processed digitally, and counting circuit 13 And an output circuit 14.

The target data pulse signal 8 is electro-optically modulated by the light source 15 of the I / F portion 9. The wavelength of the optical signal generated from the light source 15 is not limited, and ultraviolet rays, visible rays, infrared rays, and the like may all be used. In addition, the light emitting device that may be used as the light source 15 includes a light emitting diode (LED), a laser diode (LD), a laser, an ultraviolet light generator, an infrared light generator, a lamp, and the like, and the present invention is not limited to a specific light emitting device. Do not.

The optical signal generated by the light source 15 is blocked or passed by the optical switch 16. As the optical switch 16, various elements such as a liquid crystal element, a piezoelectric element such as PLZT, an electro-optical optical shutter using a Pockels effect, and a Faraday effect, an acoustic optical shutter, an optical waveguide, and an optical shutter using an optical crystal may be used. The invention is not limited to a particular optical switch.

At this time, the I / F driving circuit 10 is operated by the reference code in the memory 11 storing the reference data such as the ROM or the flash memory, and the optical switch 16 performs the opening / closing operation in synchronization with the light emission signal. While the optical switch is open, the optical signal emitted from the light source 15 is received by the light receiving element 17. However, the optical signal emitted from the light source 15 is transmitted to the light receiving element 17 when the optical switch is closed. It cannot be received by

The optical signal passing through the optical switch is received by the light receiving element 17. As the light receiving device 17, various devices such as a photodiode (PD), a phototransistor, an ultraviolet sensor, an infrared sensor, and a solid light receiving sensor may be used, and the present invention is not limited to a specific light receiving device. Moreover, it is also possible to use what integrated the light source 15 and the light receiving element 17, such as a photo coupler and a photo interrupter.

The optical pulse signal collected by the light receiving element 17 through the optical switch 16 is converted into an electrical signal, amplified by the waveform amplifying circuit 12 and transmitted to the counting circuit 13. The counting circuit 13 counts the number of pulses passed by the optical switch 16 by. At this time, the security authentication is determined based on the number of pulse signals counted. In this way, the processing is performed at the same time as the signal is received, so that determination can be made in real time, thereby enabling high-speed processing.

4A and 4B illustrate timing charts for explaining a function of querying an identification code in the security authentication system of FIGS. 2 and 3.

4A shows a case where an inquiry result for authenticating the target ID code is correct. Synchronizing with the start bit, the optical switch 16 performs the opening and closing operation by the reference code stored in the memory 11. When the light source 15 emits light (logic 1), the optical switch 16 performs a closing operation (logic 0), so that the optical signal does not reach the light receiving element 17. When the light source 15 does not emit light (logic 0), the optical switch 16 performs the opening operation (logic 1), and thus the light signal does not reach the light receiving element 17. For this reason, the counting circuit 12 knows that the counted pulse number between the start bit and the stop bit is zero, so that the object ID code to be queried matches the reference code.

In contrast, FIG. 4B illustrates a case in which an inquiry result for authenticating the target ID code is wrong. For example, when the input target ID code does not coincide with the reference code stored in the memory 11, the pulse of the received signal detected by the light receiving element 17 through the optical switch 16 is One pulse is generated between the start bit and the stop bit and counted in the counting circuit 13. At this time, the authentication inquiry result is determined as inappropriate.

On the other hand, when the target ID code is all 0, it can be regarded as improper authentication by using that no light emission signal 15 is generated between the start bit and the stop bit, and the line can be cut off by closing the optical switch.

As described above, according to the first embodiment of the present invention, security authentication is possible only by counting the number of pulses passing through the optical switch 16 in the counting circuit 13. Thus, the circuit is simple and provides a hardware device configuration that does not depend on software. In addition, since electrical signals logic 1 and 0 are converted into optical signals and transmitted, electrical isolation can be achieved, which is very resistant to data eavesdropping by electrical connection.

Second Embodiment

By applying the principle in the first embodiment, it can be seen that it is possible to change the light emission signal, which is the target ID code data, to an arbitrary signal by the memory reference code and the optical switch. That is, by inserting the encryption code into the memory 11 of Fig. 2, it is possible to output the encrypted code to the outside by encrypting the light emitting signal without operating the software and outputting it without passing through the counter circuit. On the contrary, it is possible to decode the original target data using the memory reference code used at the time of transmission using this output signal as input data.

5A and 5B are block diagrams showing the configuration of an encryption and decryption system according to the present invention.

In this embodiment, in transmitting the text data 18 as shown in FIG. 5A, the text data is modulated into an optical signal using a light emitting element and then passed through an optical switch. The driving circuit 20 is driven by an encryption code stored in the memory 21 to open or close the optical switch in the I / F 19. The optical signal thus passed is encrypted and converted into an electrical signal by the light receiving element and then output by the amplifier circuit 22 as a pulse train.

Decryption is converted into an optical signal by the encryption signal modulation circuit 24 and then shown in the I / F 25 again by an optical switch driven according to a decoding code stored in the memory 27 as shown in FIG. 5B. Is decoded and returned to the original data via the amplifying circuit 28.

Third Embodiment

In the first embodiment, when the input data is 0, no light signal is generated in the light emitting device, and thus, the light signal does not reach the light receiving device regardless of whether the optical switch is opened. Therefore, when there are many zeros in the input data, the reliability of authentication is lowered. An improvement of this problem is shown in FIGS. 6 and 7.

In FIG. 6, the liquid crystal panel 39 was used as an optical switch. The liquid crystal panel 39, which is an optical switch, has a simple structure having a shutter function per pixel and is driven in accordance with a reference code stored in a memory. The liquid crystal light switch 39 serves as a polarizer 41 and an analyzer 43 by forming two polarizing plates each having a structure in which the optical axes are rotated at 0 degrees and 90 degrees so that the optical axes cross at right angles to both sides of the liquid crystal cell 42. A single liquid crystal optical switch 39 is formed such that two pixels having a negative relationship and a positive relationship are expressed. That is, the ferroelectric liquid crystals in the liquid crystal light switch 39 all move in the same motion, but when no voltage is applied to the liquid crystal cell 42, one pixel is in a closed state and the other pixel is in an open state. When the voltage is applied, the reverse operation.

7 is a block diagram of a security authentication system using the I / F 31 of FIG. The object data 30 simultaneously emits or turns off two light emitting elements in the I / F 31. The optical signal from the light emitting element passes through the liquid crystal optical switch 39. When the optical signal passes through the liquid crystal light switch 39, the polarizer 41 and the analyzer 43 provided on both sides of the liquid crystal light switch 39 cross each other at right angles to each other, so that when one pixel is closed, the other pixel The open pulse causes the optical pulse signal to be out of phase. Each signal is detected by the light receiving elements independent of each other, and is output through the amplifying circuit 34, the counting circuit 35, and the logic gate circuit 36. The logic gate circuit 36 serves to determine whether to authenticate input data from the output of the counting circuit 35, and the authentication code when the output of the counting circuit is 0 on one side and 1 on the other side of the input data. Outputs a signal indicating that

8A and 8B are timing charts at that time, and FIG. 8A shows a case where the authentication codes match and FIG. 8B shows a case where they do not match.

In the liquid crystal switch 39 of a pixel which is in an open state when no voltage is applied to the liquid crystal cell 42, when the reference code stored in the memory 33 and the light emission signal corresponding to the target data 30 coincide. The optical signal does not pass through the liquid crystal switch. Therefore, when the reference code and the target data 30 coincide, the number of pulses counted by the counting circuit 35 by the signal A passed through the liquid crystal switch is zero.

On the other hand, in the liquid crystal switch 39 of another pixel which is in a closed state without applying a voltage, when the reference code stored in the memory 33 and the light emission signal corresponding to the target data 30 coincide, the optical signal is a liquid crystal. Pass the switch. Thus, when the reference code and the target data 30 coincide, the number of pulses counted by the counting circuit 35 by the signal B passing through the liquid crystal switch coincides with the number of pulses of the memory reference code.

In the present embodiment, it is recognized that the authentication inquiry results are completely identical only when these two optical signals A and B simultaneously satisfy the above two conditions. 7 shows that pulses in these two directions are output through the logic gate circuit 36.

Fourth Embodiment

Authentication inquiry method according to the first embodiment as described above can be used for password inquiry of the network. 9 and 10 show that the present invention can be applied to building a firewall on a network. That is, a firewall is provided between the public line 44 and the server 46 to prevent intrusion from the outside by using password inquiry as hardware.

The password data 30 input through the public line 44 is authenticated using the password code stored in the memory 33 and the optical switch in the I / F 31. If the input password data 30 and the stored password code do not match, 0 is output from the AND gate 36. On the contrary, if they match, 1 is output from the gate circuit 36. Therefore, if they do not match, data cannot pass through the AND gate 45, and thus no entry into the server 46 is possible.

Moreover, the optical switch itself can be used as a gate. Figure 10 shows the case where the present invention is used in this method. If the password inquiry results match, the output of the gate circuit 36 becomes 1, the optical switch driving circuit 32 is fed back, and the optical switch in the I / F 31 is in an open state, so that the password data is stored in the server ( 46). If the passwords do not match, the optical switches may be completely shielded by hardware, if necessary, to completely block the external public lines 44.

Fifth Embodiment

11 shows an example in which the present invention is applied to security by continuously querying an encryption code on a network. Data 78 sent over the public line 44 passes through the I / F module 75 of the present invention before reaching the server 46 in the LAN 74. At this time, the encryption code 79 is connected in front of the data signal 78 so that the encryption code is authenticated before being connected to the server 46. If the inquiry of the cipher code 79 is correct, the optical switch in the I / F 75 is opened to send the incoming data signal 78 to the server 46 accordingly. If authentication of the cipher code 79 inquired is incorrect, the optical switch in the I / F 75 is closed to prevent the incoming data signal 78 from being sent to the server 46 accordingly.

This authentication allows multiple repetitions of the inquiry on an appointment or a fixed time, and if the encryption code authentication is wrong at any time, it is regarded as a network intrusion and the optical switch is closed to close the electrically isolated intrusion prevention system. Enable to build in real time. In addition, in this application example, it is possible to lower or increase the level of security check security by the encryption code authentication time interval. In other words, by narrowing the authentication time interval of the encryption code sent alternately with the data signal, the authentication is performed several times to increase the level of security, and if the authentication time is sometimes increased by increasing the authentication time interval, the level of security is lowered. And the encryption code to be queried can be made to be constantly changed, unlike the encryption code sent before.

Another application may provide a network security system including the present invention when a LAN is established as an optical communication system in a public line in a network. If it does not match the authentication code embedded in the memory 33, the optical transmission can be forcibly stopped. If a strange data signal or a data signal that does not match the authentication code is transmitted, the optical switch is interrupted to stop the transmission. In addition, it can be applied to the construction of a highly reliable defense system capable of combining the frequency of the optical switching and the frequency of the transmission signal.

This embodiment is applicable not only to preventing unauthorized access to the server but also to individual computer users. In other words, if you accept unnecessary direct mail, which is not related to the user, regardless of your intention, you will be defenseless against spam or virus mail and other adverse effects on children. However, the above problem can be solved because the present invention can determine whether data is transmitted from the outside of the computer.

In addition, by forming an optical switch by arranging liquid crystal elements and the like in parallel, a high-level inquiry system capable of high-capacity processing or precise inquiry can be configured. In particular, liquid crystal devices can be diversified in pixels, making them ideal for low-cost devices.

The present method can be combined with a wireless transmission method and can function as a device for processing the transmitted information. Combination with an IC card is also possible. Conventionally, the inquiry of information from the IC card is operated by software, but there is a risk of eavesdropping and the like at the time of inquiry. However, when used in combination with the present invention, it is possible to query optically, so that complicated inquiry can be performed in a short time, and there is no fear of reading personal information more than necessary.

It can also be used in combination with fingerprint inquiry. For example, the fingerprint information is read as an image signal and then corrected with a data pulse sequence to be electronically queried through software, but it takes a lot of time for inquiry. In particular, when the fingerprint database to be searched is huge, the search query processing speed is enormous. However, by inquiring the fingerprint information stored in the memory in advance through the optical logic device in this manner, the processing speed can be increased.

By using the optical switch security device according to the present invention it is possible to implement a device that can prevent theft and malfunction of information that can not be completely built by the conventional method. In addition, by using light switching and light transmission using light without using radio waves, it is possible to provide a small security device and system that is resistant to electromagnetic interference and eavesdropping and harmless to the human body.

In addition, since the current consumption of the IF circuit of the present invention can be used for two or three years with two batteries (3V) as much as several microamps, there is an effect that a portable authentication device can be inexpensive and have a long life.

The present invention is used in security devices such as electronic commerce, authentication system, intrusion prevention system and access security device of the building, door lock / unlock, security card, etc. on the network, there is no malfunction It can provide a high quality security device that is resistant to information theft and information hacking. In addition, according to the present invention, it is possible to cope with the development of a cryptographic system with a strong defense against information theft from the outside.

Claims (12)

Memory that stores the reference code, Light emitting unit for converting the input data into an optical signal, An optical switch unit for passing or blocking an optical signal from the light emitting unit; A light receiving unit which receives an optical signal passing through the optical switch and converts the optical signal into an electrical signal; A driving unit controlling to open or close the optical switch unit according to a reference code stored in the memory; An amplifier for amplifying an electrical signal from the light receiver, A counter for counting electrical pulses from the amplifier Information security device having a. The information security apparatus according to claim 1, wherein authentication is performed when the number output from said counter is zero. The information security apparatus of claim 1, wherein the light emitting unit is one of a light emitting diode (LED), a laser diode (LD), a laser, an ultraviolet ray generator, an infrared ray generator, or a lamp. The information security apparatus according to claim 1, wherein the light receiving unit is one of a photodiode (PD), a phototransistor, an ultraviolet sensor, an infrared sensor, and a solid light receiving sensor. An information security apparatus according to claim 1, wherein said light receiving portion and said light emitting portion are integrated. The optical switch of claim 1, wherein the optical switch unit is one of a liquid crystal element, a piezoelectric element such as PLZT, an electro-optical optical shutter using a Pockels effect, and a Faraday effect, an acoustic optical shutter, an optical waveguide, and an optical shutter using an optical crystal. Information security device. 2. The light emitting unit of claim 1, wherein the light emitting unit includes two light emitting elements, the light receiving unit includes two light receiving elements, the optical switch unit includes two optical switches operating in opposite directions, and the amplifying unit includes two amplifiers. The counter is composed of two counters, And a determination unit connected to the counter unit for outputting a signal indicating that one of the counters is authenticated when one of the counters and the other corresponds to the number of ones of the input signals. Memory that stores the passcode, Light emitting unit for converting the input data into an optical signal, An optical switch unit for passing or blocking an optical signal from the light emitting unit; A light receiving unit which receives an optical signal passing through the optical switch and converts the optical signal into an electrical signal; A driving unit controlling to open or close the optical switch according to an encryption code stored in the memory; An amplifier for amplifying an electrical signal from the light receiver Encryption apparatus having a. Memory that stores the reference code, Light emitting unit for converting the input data into an optical signal, An optical switch unit for passing or blocking an optical signal from the light emitting unit; A light receiving unit which receives an optical signal passing through the optical switch and converts the optical signal into an electrical signal; A driving unit controlling to open or close the optical switch according to a reference code stored in the memory; An amplifier for amplifying an electrical signal from the light receiver, A counter for counting electrical pulses from the amplifier, A judging section for judging whether the input data coincides with a reference code from the output of the counting section, and outputting 1 when authentication is performed; An AND gate having an output of the determination unit connected to one input terminal and the input data connected to the other input terminal. Information security device having a. The method of claim 9, And the determination unit outputs 1 only for a predetermined time when the input data is valid. Memory that stores the reference code, A light emitting unit having two light emitting elements for converting the input data into an optical signal, An optical switch unit having two optical switches operating in opposite directions to pass or block an optical signal from the light emitting unit, A light receiving unit having two light receiving elements for receiving an optical signal passing through the optical switch and converting the optical signal into an electrical signal; A driving unit controlling to open or close the optical switch according to a reference code stored in the memory; An amplifier having two amplifiers for amplifying an electrical signal from the light receiver, A counter having two counters for counting electrical pulses from the amplifier, A determination unit which is connected to the counting unit and outputs a signal for controlling the driving unit to open the optical switch unit when a number corresponding to the number of 0 in one of the counters and 1 in the other is output. Equipped with And an information security device that outputs data from one of the light receivers of the light receiver. The method of claim 11, And the determining unit outputs a signal for opening the optical switch unit only for a predetermined time when a number corresponding to 0 in one of the counters and 1 in the other is output.